CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Linux Kernel cgroups v1 Container Escape and Privilege Escalation Vulnerability (CVE-2022-0492)
[Affected Scope] Container environments and host OS running Linux kernel versions prior to v5.17-rc3
[Impact] An attacker inside a container can bypass namespace isolation, escalate privileges to host root, and execute arbitrary code
[Mitigation] Update the Linux kernel to the patched version, and enforce container security profiles (AppArmor, Seccomp, non-root users)
Linux Kernel legacy_parse_param Heap Buffer Overflow Vulnerability (CVE-2022-0185) Technical Advisory
[Affected Scope] Linux kernel versions 5.1 and lateral, specifically environments utilizing filesystems that fallback to legacy handling and have unprivileged user namespaces enabled
[Impact] An unprivileged local attacker can trigger a heap-based buffer overflow in kernel memory, leading to local privilege escalation (LPE) to root
[Mitigation] Apply the official kernel security patches immediately, or disable unprivileged user namespaces as a temporary workaround
Linux Kernel af_packet.c Double Free Local Privilege Escalation Vulnerability (CVE-2021-22600) Security Advisory
[Affected Scope] Linux Kernel environments prior to specific patched versions
[Impact] A local attacker can trigger a double free via crafted system calls, leading to kernel memory corruption, Denial of Service (DoS), or local privilege escalation to root.
[Mitigation] Upgrade the Linux kernel to the latest distribution package or rebuild with upstream commit ec6af094ea28.
Android Kernel eventpoll.c Use-After-Free Vulnerability (CVE-2021-1048) Analysis and Mitigation Guide
[Affected Scope] Android kernel and upstream Linux kernel integrated into mobile devices and embedded systems
[Impact] Local attackers can corrupt kernel memory and escalate privileges to Root without requiring any user interaction or additional execution privileges
[Mitigation] Apply the Android November 2021 Security Bulletin patch or upgrade to the patched upstream Linux kernel version
Linux Kernel & Android af_unix.c Use-After-Free Local Privilege Escalation Vulnerability (CVE-2021-0920)
[Affected Scope] Android kernel and Linux kernel implementations of AF_UNIX sockets
[Impact] Local attackers can exploit this to gain System execution privileges without any user interaction, leading to full device compromise
[Mitigation] Apply the Android November 2021 security patch or update to the latest upstream Linux kernel version
Linux Kernel Netfilter x_tables Heap Out-of-Bounds Write Local Privilege Escalation (CVE-2021-22555) Analysis and Mitigation Guide
[Affected Scope] Linux Kernel versions since v2.6.19-rc1 that lack the official security patch, particularly environments with user namespaces enabled
[Impact] A local attacker can trigger heap memory corruption to escalate privileges to root or cause a system-wide Denial of Service (DoS)
[Mitigation] Upgrade the Linux kernel to the latest stable release, or apply temporary workarounds to restrict unprivileged user namespace creation
Ubuntu Linux Kernel OverlayFS Local Privilege Escalation Vulnerability (CVE-2021-3493) Analysis and Mitigation Guide
[Affected Scope] Ubuntu Linux kernel versions with unprivileged user namespaces and OverlayFS mounting enabled
[Impact] A local unprivileged attacker can exploit improper file capability validation to gain full root privileges on the host
[Mitigation] Upgrade to the latest patched Ubuntu kernel and reboot, or temporarily disable unprivileged user namespaces
Linux Kernel create_elf_tables() Integer Overflow Local Privilege Escalation Vulnerability (CVE-2018-14634, Mutagen Astronomer)
[Affected Scope] Linux kernel versions 2.6.x, 3.10.x, and 4.14.x, primarily affecting Red Hat Enterprise Linux and derivative distributions.
[Impact] An unprivileged local attacker can exploit this vulnerability via SUID binaries to trigger an integer overflow, achieving full root-level privilege escalation.
[Mitigation] Apply the official vendor kernel patches immediately and reboot the system, or implement temporary SUID restrictions and SystemTap mitigations.
Linux Kernel Local Privilege Escalation via PIE Binary Mapping Flaw (CVE-2017-1000253)
[Affected Scope] Unpatched long-term support (LTS) Linux kernels and major enterprise distributions including Red Hat Enterprise Linux
[Impact] A local attacker can exploit memory mapping flaws to bypass security boundaries, leading to full root privilege escalation
[Mitigation] Apply the latest kernel security updates provided by your Linux distribution vendor immediately
Linux Kernel Copy-on-Write Race Condition Local Privilege Escalation (Dirty COW, CVE-2016-5195)
[Affected Scope] All Linux distributions and Android systems running Linux kernel versions 2.x through 4.x before 4.8.3
[Impact] A local attacker can exploit a race condition to write to read-only memory mappings, gaining root privileges on the target system
[Mitigation] Apply the latest kernel security patches provided by your OS vendor and reboot the system
Qualcomm MSM Audio Driver Stack-Based Buffer Overflow (CVE-2013-2597) Technical Advisory
[Affected Scope] Android devices powered by Qualcomm MSM chipsets running Linux kernel versions 2.6.x and 3.x
[Impact] Local attackers can exploit the /dev/msm_acdb device node to trigger a stack-based buffer overflow, leading to local privilege escalation (LPE) to root
[Mitigation] Apply official kernel patches from Qualcomm/Google, or restrict access permissions to the vulnerable /dev/msm_acdb device node
Linux Kernel futex_requeue Local Privilege Escalation Vulnerability (CVE-2014-3153, Towelroot)
[Affected Scope] All Linux distributions and Android devices running Linux kernel versions up to and including 3.14.5
[Impact] A local unprivileged user can exploit this vulnerability to corrupt kernel memory and gain full root privileges on the target system
[Mitigation] Upgrade the Linux kernel to the latest patched version provided by your OS vendor and reboot the system
Linux Kernel n_tty_write Race Condition Local Privilege Escalation (CVE-2014-0196)
[Affected Scope] All Linux systems running Linux kernel versions up to and including 3.14.3
[Impact] Local attackers can exploit a race condition to corrupt kernel memory, leading to a denial of service (system crash) or full root privilege escalation
[Mitigation] Apply the latest kernel security updates provided by your OS vendor and reboot the system
Linux Kernel ARM Platform get_user/put_user Missing Address Validation Arbitrary Kernel Memory Read/Write and Privilege Escalation (CVE-2013-6282)
[Affected Scope] Linux kernel before version 3.5.5 running on v6k and v7 ARM platforms, including affected Android devices
[Impact] Local attackers can exploit missing address validation in get_user and put_user APIs to read or write arbitrary kernel memory, leading to full root privilege escalation
[Mitigation] Upgrade the Linux kernel to version 3.5.5 or higher, or apply the latest security patches provided by your OS/device vendor
Linux Kernel perf_event_open Integer Validation Vulnerability leading to Local Privilege Escalation (CVE-2013-2094)
[Affected Scope] Linux kernel versions 2.6.37 through 3.8.8
[Impact] Local unprivileged users can exploit this vulnerability via a crafted perf_event_open system call to execute arbitrary code with root privileges
[Mitigation] Upgrade the Linux kernel to version 3.8.9 or higher, or restrict unprivileged access to performance events by configuring perf_event_paranoid
Linux Kernel fb_mmap Integer Overflow Local Privilege Escalation Vulnerability (CVE-2013-2596)
[Affected Scope] Linux kernel versions before 3.8.9, including certain Android 4.1.2 builds and embedded Linux systems
[Impact] Local attackers can exploit an integer overflow to map the entire kernel memory space with read-write permissions, leading to full root privilege escalation
[Mitigation] Upgrade the Linux kernel to version 3.8.9 or higher, and restrict access permissions to framebuffer device files
Linux Kernel RDS Protocol Privilege Escalation Vulnerability (CVE-2010-3904) Technical Analysis and Mitigation Guide
[Affected Scope] Linux kernel versions before 2.6.36 with the Reliable Datagram Sockets (RDS) protocol module enabled
[Impact] Local unprivileged users can exploit this vulnerability via crafted sendmsg and recvmsg system calls to gain full root privileges
[Mitigation] Upgrade the Linux kernel to a patched version, or disable the RDS kernel module by blacklisting it if not required